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DETAILED ACTION 
Response to Arguments 

1. In view of Applicant's initiated interview on 04/26/2007, with respect to proposed 
amended Claims 39 - 44 and 46-47 have been fully considered and are persuasive. 

Allowable Subject Matter 

2. Claims 21 -26, 28 - 35, 37 - 44 and 46 - 47 are allowed and renumbered as 1 - 
24. 



3. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Carlos R. Villamar, Registration Number 43,224 on April 26, 2007. 
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IN THE CLAIMS: 

39. (Amended) A computer program product for providing a browser interface system 
for protecting a computer network, and including one or more computer-readable 
instructions embedded on a computer readable storage medium and configured to 
cause one or more computer processors to perform the steps of: 

providing communications access to an unprotected network from a protected 
network via a browser module, wherein the browser module is separate and physically 
distinct from protected computers; 

communicating with the browser module through a browser client module, 
wherein said browser client module provides control of video and audio output of a 
browser operating remotely on said browser module; 

analyzing communications between the browser module and the browser client 
module via a browser isolator module; 

preventing unauthorized communications between the browser module and the 
browser client module via the browser isolator module; and 

preventing the transfer of permanently stored data between the protected 
computers and the browser module, and between the protected computers and the 
unprotected network. 
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40. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of limiting the 
communication between the browser and browser client module to those 
communications specifically necessary for remote operation of the browser module. 

41. (Amended) The computer program product of claim 40, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of screening at least 
one of the following types of information to determine if the communication is 
authorized: 

source and destination ports, user information, origination information, host 
information, destination information, character information, IP address information, 
display identification, session information, display class, display number, TCP 
information, and date and/or time information. 

42. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of said browser module 
further comprising a distributed network browser. 
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43. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of isolating the 
protected network from unauthorized communications received from the unprotected 
network. 

44. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of operating any 
browser-executed code on the browser module. 

46. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of protecting the 
protected computer from unauthorized content, wherein said browser module is 
sacrificial. 

47. (Amended) The computer program product of claim 39, comprising further 
instructions embedded on the computer readable storage medium and configured to 
cause the one or more computer processors to perform the step of performing detailed 
field checks, said field checks reducing the chance of defect in the protocol 
implementation on either the browser module or protected computer. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Nasser Moazzami can be reached on 571-232-4195. Any inquiry of a general nature or 
relating to the status of this application or proceeding should be directed to the 
receptionist whose telephone number is 703-305-3900. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR only. For more 
information about the PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). 



Pramila Parthasarathy 
April 30, 2007. 
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